openapi: "3.1.0"
info:
  title: "MSI Tree by PH3AR API"
  version: "0.0.1"
  description: "Public-safe Windows Installer MSI database viewing, demo table browsing, static analysis, exports, discovery, and MCP tooling. Static analysis only; the service does not install packages, execute custom actions, run embedded binaries, or invoke msiexec."
  contact:
    name: "PlatPhormNews"
    url: "https://platphormnews.com"
servers:
  -
    url: "https://msi.platphormnews.com"
    description: "Production"
tags:
  -
    name: "Platform"
    description: "Health, docs, discovery, auth policy, and route compliance"
  -
    name: "MSI"
    description: "MSI parsing, demo, tables, search, summary, export, and static analysis"
  -
    name: "MCP"
    description: "JSON-RPC 2.0 MSI tooling and read-only introspection"
paths:
  /:
    get:
      summary: "MSI Tree Workbench"
      description: "MSI Tree Workbench. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /viewer:
    get:
      summary: "Viewer"
      description: "Viewer. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /demo:
    get:
      summary: "Demo Database"
      description: "Demo Database. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /tables:
    get:
      summary: "Table Explorer"
      description: "Table Explorer. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /search:
    get:
      summary: "Global Search"
      description: "Global Search. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /export:
    get:
      summary: "Export Utility"
      description: "Export Utility. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /analyze:
    get:
      summary: "Static Analyzer"
      description: "Static Analyzer. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /integrations:
    get:
      summary: "Integrations"
      description: "Integrations. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /docs:
    get:
      summary: "Documentation"
      description: "Documentation. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /faq:
    get:
      summary: "FAQ"
      description: "FAQ. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /privacy:
    get:
      summary: "Privacy"
      description: "Privacy. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /terms:
    get:
      summary: "Terms"
      description: "Terms. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /disclaimer:
    get:
      summary: "Disclaimer"
      description: "Disclaimer. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/docs:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /openapi.yaml:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /openapi.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /llms.txt:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /llms-full.txt:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /llms-index.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /robots.txt:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /sitemap.xml:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /sitemap-main.xml:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /rss.xml:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /feed.xml:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /manifest.webmanifest:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /.well-known/mcp.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MCP"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /.well-known/agents.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /.well-known/ai-plugin.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /.well-known/security.txt:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /.well-known/trust.json:
    get:
      summary: "Public discovery or documentation route"
      description: "Public discovery or documentation route. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/health:
    get:
      summary: "Public health summary with honest degraded states"
      description: "Public health summary with honest degraded states. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/health:
    get:
      summary: "Versioned public health summary"
      description: "Versioned public health summary. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/parse:
    post:
      summary: "Bounded static MSI parser; public-safe in Phase 1, protected scaffolded"
      description: "Bounded static MSI parser; public-safe in Phase 1, protected scaffolded. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:
        -
          PlatPhormBearer:

        -
          PlatPhormHeader:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/demo:
    get:
      summary: "Demo MSI database metadata and rows"
      description: "Demo MSI database metadata and rows. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/tables:
    get:
      summary: "Demo MSI table list"
      description: "Demo MSI table list. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/tables/{tableName}:
    get:
      summary: "Demo MSI table detail"
      description: "Demo MSI table detail. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:
        -
          name: "tableName"
          in: "path"
          required: true
          schema:
            type: "string"
      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/search:
    post:
      summary: "Search a provided MSI database or demo database"
      description: "Search a provided MSI database or demo database. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/export/json:
    post:
      summary: "Export provided MSI database or demo as JSON"
      description: "Export provided MSI database or demo as JSON. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/export/xml:
    post:
      summary: "Export provided MSI database or demo as XML"
      description: "Export provided MSI database or demo as XML. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/export/sql:
    post:
      summary: "Export provided MSI database or demo as SQL"
      description: "Export provided MSI database or demo as SQL. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/export/csv:
    post:
      summary: "Export one MSI table as CSV"
      description: "Export one MSI table as CSV. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/analyze:
    post:
      summary: "Run deterministic static MSI analysis on provided database or demo"
      description: "Run deterministic static MSI analysis on provided database or demo. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/security:
    post:
      summary: "Return static MSI security findings"
      description: "Return static MSI security findings. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/msi/summary:
    post:
      summary: "Return SummaryInformation for provided database or demo"
      description: "Return SummaryInformation for provided database or demo. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MSI"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/integrations/status:
    get:
      summary: "Public-safe integration status"
      description: "Public-safe integration status. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/integrations/json:
    post:
      summary: "Build a bounded JSON integration handoff payload"
      description: "Build a bounded JSON integration handoff payload. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/integrations/xml:
    post:
      summary: "Build a bounded XML integration handoff payload"
      description: "Build a bounded XML integration handoff payload. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/integrations/svg:
    post:
      summary: "Build a bounded SVG integration handoff payload"
      description: "Build a bounded SVG integration handoff payload. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/v1/integrations/ascii:
    post:
      summary: "Build a bounded ASCII integration handoff payload"
      description: "Build a bounded ASCII integration handoff payload. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/mcp:
    get:
      summary: "MCP endpoint metadata and usage"
      description: "MCP endpoint metadata and usage. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MCP"
      security:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
    post:
      summary: "JSON-RPC 2.0 MCP endpoint for MSI tools"
      description: "JSON-RPC 2.0 MCP endpoint for MSI tools. MSI Tree is static-only and never executes MSI content."
      tags:
        - "MCP"
      security:
        -
          PlatPhormBearer:

        -
          PlatPhormHeader:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
  /api/cron/refresh:
    get:
      summary: "Bounded refresh/validation job; requires Vercel cron or PLATPHORM_API_KEY when enforcement is enabled"
      description: "Bounded refresh/validation job; requires Vercel cron or PLATPHORM_API_KEY when enforcement is enabled. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:
        -
          PlatPhormBearer:

        -
          PlatPhormHeader:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
    post:
      summary: "Bounded refresh/validation job; requires Vercel cron or PLATPHORM_API_KEY when enforcement is enabled"
      description: "Bounded refresh/validation job; requires Vercel cron or PLATPHORM_API_KEY when enforcement is enabled. MSI Tree is static-only and never executes MSI content."
      tags:
        - "Platform"
      security:
        -
          PlatPhormBearer:

        -
          PlatPhormHeader:

      parameters:

      responses:
        200:
          description: "Public-safe response"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiOk"
        400:
          description: "Invalid request"
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ApiError"
components:
  securitySchemes:
    PlatPhormBearer:
      type: "http"
      scheme: "bearer"
      description: "Future protected actions accept Authorization: Bearer $PLATPHORM_API_KEY when enforcement is enabled."
    PlatPhormHeader:
      type: "apiKey"
      in: "header"
      name: "X-PlatPhorm-API-Key"
      description: "Future protected actions accept X-PlatPhorm-API-Key when enforcement is enabled."
  schemas:
    ApiOk:
      type: "object"
      properties:
        ok:
          const: true
        data:
          type: "object"
      required:
        - "ok"
        - "data"
    ApiError:
      type: "object"
      properties:
        ok:
          const: false
        error:
          type: "object"
          properties:
            code:
              type: "string"
            message:
              type: "string"
            details:
              type: "object"
          required:
            - "code"
            - "message"
      required:
        - "ok"
        - "error"
x-msi-tree:
  publicSafeByDefault: true
  authPolicy:
    platformKeyName: "PLATPHORM_API_KEY"
    acceptedHeaders:
      - "Authorization: Bearer $PLATPHORM_API_KEY"
      - "X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"
    mode: "shared"
  noExecutionPolicy: true
  degradedStatesDocumented: true
